Unrated severityNVD Advisory· Published Jul 14, 2014· Updated May 6, 2026
CVE-2014-4944
CVE-2014-4944
Description
Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) categoryid or (2) pdfid parameter to wp-admin/admin.php.
Affected products
1- cpe:2.3:a:bannersky:bsk_pdf_manager:1.3.2:*:*:*:*:wordpress:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.